Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
File: PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft (raw, json)
Hash identifier: ZRoyttbmIrS1WRO8WqYQdSj9wENL4ogjj8Px5GZ07RE=
Subject key identifier: 7E:08:9F:46:5D:51:C1:57:05:A5:20:04:77:D8:56:D3:AE:5B:A7:AD
Authority key identifier: 3C:14:15:42:16:85:AC:E3:68:2F:16:1D:31:0D:92:72:6C:DF:B0:97
Certificate issuer: /CN=3c1415421685ace3682f161d310d92726cdfb097
Certificate serial: 01A17B84218C4E2CF5E983267D7366616CCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBQVQhaFrONoLxYdMQ2ScmzfsJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
Manifest number: 1AC0
Signing time: Tue 27 Oct 2026 04:00:19 +0000
Manifest this update: Tue 27 Oct 2026 04:00:19 +0000
Manifest next update: Wed 28 Oct 2026 04:00:19 +0000
Files and hashes: 1: PBQVQhaFrONoLxYdMQ2ScmzfsJc.crl (hash: OYCYFzUA3BoSd7BUkpGqIWPb3wpYvLyoP5t5xcvuM6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBQVQhaFrONoLxYdMQ2ScmzfsJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:84:21:8c:4e:2c:f5:e9:83:26:7d:73:66:61:6c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1415421685ace3682f161d310d92726cdfb097
Validity
Not Before: Oct 27 04:00:19 2026 GMT
Not After : Oct 28 04:00:19 2026 GMT
Subject: CN=7e089f465d51c15705a5200477d856d3ae5ba7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:91:58:37:39:70:47:36:f3:4b:73:c3:3d:b8:
1e:be:56:02:6b:a6:6c:9b:38:14:a2:39:7b:89:e0:
a1:dd:85:23:7a:07:66:bc:d3:3e:38:e8:91:f0:04:
66:7e:4a:4e:f3:2d:09:aa:bf:96:70:33:b9:8c:38:
b4:cc:75:c9:15:8f:b1:61:ac:91:48:b7:09:16:ac:
0c:d0:1d:10:cf:b3:c0:61:67:f1:f8:92:6a:82:fd:
6b:dc:07:7e:59:92:d9:97:01:ad:05:8a:f9:19:b8:
8d:d5:08:b7:47:55:3b:5e:17:df:47:fa:2f:a6:e6:
38:13:2e:4e:c4:a9:84:31:dd:32:e2:0c:d1:bf:d7:
6d:01:70:c0:02:3b:9a:7a:fc:f9:46:6d:4f:c9:eb:
7e:85:ca:a5:92:e9:fb:42:23:86:d0:e8:9a:a6:8b:
22:e4:62:4b:20:11:c7:44:ec:da:13:ab:e8:d7:89:
12:1c:c4:b0:fb:62:58:0c:b9:ac:86:a3:5f:e3:fb:
3d:f4:9e:a4:2f:13:e5:26:fb:37:db:0a:7e:7d:19:
3d:01:8a:30:77:3c:3d:32:c5:40:8d:7f:7e:e2:ae:
f2:a9:69:b5:d8:fa:60:45:a9:94:f8:d9:a7:1e:37:
0b:bf:2a:30:1f:94:39:4a:9a:a3:05:f7:7c:e7:49:
1c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:08:9F:46:5D:51:C1:57:05:A5:20:04:77:D8:56:D3:AE:5B:A7:AD
X509v3 Authority Key Identifier:
keyid:3C:14:15:42:16:85:AC:E3:68:2F:16:1D:31:0D:92:72:6C:DF:B0:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBQVQhaFrONoLxYdMQ2ScmzfsJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2a:43:11:6f:a2:23:a3:aa:39:09:c2:e0:45:08:03:43:39:
6c:a2:88:dc:48:a4:53:74:a3:cd:bc:eb:cd:01:63:f9:1e:f1:
40:09:1d:94:a6:25:0f:3f:93:e1:16:f3:c0:c2:51:3b:84:05:
66:53:e7:b9:ae:6a:59:d8:94:a4:dd:bd:c3:f1:c6:e2:49:dd:
b5:13:cb:af:4e:3e:ca:8a:f0:1e:1c:63:1d:63:23:14:fa:4b:
b8:4f:14:4a:00:01:c3:a2:98:61:16:17:76:72:6f:db:46:51:
64:42:1e:55:89:1d:63:7e:ac:35:40:89:43:73:13:e5:10:45:
dc:43:03:75:96:f4:08:84:48:d5:34:78:62:37:c7:60:1e:52:
4a:a5:1e:6d:72:28:d2:8e:b6:ab:e8:17:46:de:f2:6c:a1:b4:
96:71:0c:3e:a9:c4:3b:77:4d:9d:1b:9a:c2:c3:d0:f6:d7:cb:
9a:27:b6:9f:6f:b2:e0:58:ef:c5:4a:4b:ca:34:c3:73:67:40:
e5:0b:a1:23:df:e5:5e:d5:67:63:b3:22:31:2e:38:cd:0d:bf:
1d:67:4c:e2:44:c4:c4:fa:b3:88:e7:15:f1:53:53:02:f4:ee:
bf:77:29:d6:59:f7:7f:ea:26:27:09:06:d7:8a:db:af:5f:19:
82:df:79:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:16:11 2026 by rpki-client